Guide to permaroot, s=off AND s=on!!!!!

First of all, unforgiven512 deserves most of the credit for coming up with the initial tutorial for perm root and s=off for the new HTC devices. Also, thanks to adwinp for the instructions on hexeditting the kernel module to make it work with the MT4G.

This was a collaborative #g2root effort, primarily involving scotty2, tmzt, IntuitiveNipple but also many others!

Ok, so the usual disclaimers go here:

I am not responsible for your bricked phone or the ignorance that may or may not have caused it based on the fact that you CHOSE to follow these steps. Read through the forums and LEARN before you attempt to flash any device. You have been warned.

This method only works for those devices who have already received their OTA update!!!

Linux Users:
1b. Using file browser of your choice (or terminal) navigate to the tools folder of your sdk and double click on adbbat.sh (type sh adbbat.sh if you are using terminal). Credit for adbbat.sh goes to slhpss.

2. Disconnect your phone from the PC.

3. Open terminal emulator on the phone and type "/data/local/rage" + enter. Wait for "Forked XXXXXXXX children" to appear and then close the terminal.

4. Start terminal back up. It should force close.

5. Start terminal back up, again. This time it should stay open and you should have a "#" prompt instead of a "$" prompt. Then type "/data/local/temp.sh.

6. When the script finishes run /data/local/rage again and sit tight. The phone should start acting weird and do a soft reboot. Then right after everything loads it should do a hard reboot. After the hard reboot reboot and check S.(If it doesn't do the two reboots just reboot into hboot yourself after rage finishes with the "forked xxxxxxxx children" message.

7. Enjoy root!

If you still have problems getting su to work after this uninstall visionary, shutdown, pull battery, and restart. Should work after that. Props to PolishDude for figuring that one out.

If you have tried EVERYTHING and still cannot get it to work for through the process and wait 30 minutes to an hour. The driver might have a cache delay write and you may need to give it some time to allow the sync command to work. This has worked for one other person (mfouco). BTW, this was figured out by coachmai. Props man!

Terminal Emulator Method
1. Open up terminal editor on your device.(I prefer this method b/c you can see the output.)

a. Type "su" + enter to gain root privileges.

b. Type "cd /sdcard/unroot" + enter.

c. Type "sh unroot.sh" + enter.

d. Follow the onscreen prompts.

File Explorer Method
2. Open root explorer, sufbs, or some other file browser with root access.

a. Navigate to /sdcard/unroot.

b. Click on unroot.sh and allow it to run. Some file browsers ask permission before they execute scripts.

c. Wait 18 to 20 seconds and reboot your phone into the bootloader to check if S=on.

You now have S=ON again.

Since we opened up the nand to writes you should still retain persistent root privileges.

Hope this makes it all easier for you.
Cheers --grankin01

For everyone that is have trouble writing to the protected areas of the system after following the rooting procedures.

Reboot into Clockwork recovery and choose the mounts and storage option. From there choose mount system (or whichever protected directory you want access to) and click the trackpad. When unmount system shows you have rw access to the /system directory and all of its subs.

Testing now. I don't have my USB cable with me at the moment so I couldn't execute the ADB commands, however I moved the files to their relevant positions via Root Explorer app.

EDIT: I has a ROOT. Glacier PVT ENG S-OFF ftw!

EDIT2:
Sorry for the bad quality, but there ya go!

EDIT3: For those who were wondering, I did everything I could through Terminal Emulator with Fast Boot off and not through ADB. Once the hboot_dhd.nb0 file had completed, I believe I sync'd, then I attempted to run VISIONary which said the phone was already rooted. Went ahead and hit "Restart," then ran VISIONary one more time when it was done and restarted again to get it to stick.

XDA Developers was founded by developers, for developers. It is now a valuable resource for people who want to make the most of their mobile devices, from customizing the look and feel to adding new functionality.Are you a developer? | Terms of Service